ADSM-L

Re: ANS5174E with Win32 client

1999-03-19 10:59:51
Subject: Re: ANS5174E with Win32 client
From: Nathan King <nathan.king AT USAA DOT COM>
Date: Fri, 19 Mar 1999 09:59:51 -0600
Wanda,

Is your NT account a domain administrator? i.e. a member of the Domain
Admins?

The following info from 'Installing the Clients' may prove useful...

By default ADSM client services are installed to run under the local system
account. Since the service uses logon properties such as persistent drive
mappings, and local search path and environment variables of the account
which it logs on, it may be desirable to have the services logged on by a
domain account.
Also, since local accounts do not have domain credentials, domain resources,
such as network drives, can only be accessed by services configured to run
under a domain authorized account using dsmcutil or the Service Control
Panel Application. Any non-system account (local or domain) must possess the
following rights:
*       Backup files
*       Restore files
*       Manage auditing
*       Security Logs
Without these rights, users can only backup files they own, but not files
owned by other users or the system registry.
These are local user rights and must be set using the local User Manager
application, and domain accounts may not automatically be enabled for them.
Domain accounts may be granted local rights by the local User Manager.
The account must also have the following permissions to the
HKEY_LOCAL_MACHINE, HKEY_KEY_USERS, and HKEY_CURRENT_USER registry hives:
*       Query Value
*       Set Value
*       Create Subkey
*       Enumerate Subkeys
The local system account and local Administrator group possess these
permissions by default. Other accounts/groups (including domain
Administrators) must be granted these permissions either explicitly via the
registry editor security dialog (regedt32), or implicitly by adding the
account/group to the local Administrators group via the local User Manager
(recommended).




        -----Original Message-----
        From:   Prather, Wanda [SMTP:PrathW1 AT CENTRAL.SSD.JHUAPL DOT EDU]
        Sent:   Friday, March 19, 1999 8:51 AM
        To:     ADSM-L AT VM.MARIST DOT EDU
        Subject:        Re: ANS5174E with Win32 client

        No.  This message is from the GUI interface.

        > -----Original Message-----
        > From: Leo Humar [SMTP:lhumar AT VIC.BIGPOND.NET DOT AU]
        > Sent: Thursday, March 18, 1999 6:42 PM
        > To:   ADSM-L AT VM.MARIST DOT EDU
        > Subject:      Re: ANS5174E with Win32 client
        >
        > Hi Wanda,
        >
        > Are you using a scheduler to backup these files
        > The scheduler requires at least backup privileges.
        >
        > Leo Humar
        > LCS Pty Ltd
        > lhumar AT vic.bigpond.net DOT au
        >
        >
        >
        > >Boy, am I confused.
        > >
        > >On my desktop system I can boot either Win95 or WinNT 4.0
workstation
        > (SP4).
        > >
        > >On either Win95 or WinNT, I run the ADSM Win32 client PTF 6J4 (a
fixtest)
        > >I log on the network as the same network user, and same ADSM
nodename no
        > >matter which system I boot.
        > >
        > >On either Win95 or WinNT, I have a permanent connection (P:) to a
network
        > >drive.
        > >The network drive is on an NT 4.0 fileserver.
        > >
        > >I have a set of directories/files on P: that I own.  I can create
and
        > delete
        > >files and directories here.  I am the NT "owner" of many of the
files,
        > >although there are other directories on this drive that are owned
by
        > others.
        > >
        > >If I am running Win95 with the PTF 6J client, I can back up,
restore, and
        > >archive all the files I normally have access to.
        > >
        > >If I am running WinNT with the PTF 6J client, I CANNOT back up or
archive
        > >most of the files I normally have access to.  The error message
is
        > ANS5174E,
        > >"A required NT privilege is not held".
        > >
        > >This doesn't make sense.  As far as NT is concerned, I can do
anything I
        > >want with these files.  And ADSM will let me access SOME of them,
but not
        > >all.
        > >
        > >Do any of you NT experts out there have any rational explanation
for
        > this?
        >
>************************************************************************
        > >Wanda Prather
        > >The Johns Hopkins Applied Physics Lab
        > >443-778-8769
        > >wanda_prather AT jhuapl DOT edu
        > >
        > >"Intelligence has much less practical application than you'd
think" -
        > >Scott Adams/Dilbert
        >
>************************************************************************
<Prev in Thread] Current Thread [Next in Thread>